Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7F09F3445A511EF95DE9E6A762E951A.roa
File: D7F09F3445A511EF95DE9E6A762E951A.roa (raw, json)
Hash identifier: fl27NahL7OkEXMD7k+uGINKW4qTznqTd/WgYuUvl1t0=
Subject key identifier: D5:0B:2A:37:E9:F0:AE:59:23:2F:8F:21:6E:0C:C1:46:1E:E3:7A:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7F09F3445A511EF95DE9E6A762E951A.roa
Signing time: Fri 19 Jul 2024 08:06:47 +0000
ROA not before: Fri 19 Jul 2024 08:06:42 +0000
ROA not after: Mon 29 Jul 2024 08:06:42 +0000
asID: 142062
IP address blocks: 156.245.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40338 (0x9d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:06:42 2024 GMT
Not After : Jul 29 08:06:42 2024 GMT
Subject: CN=669a1e97-b624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:b6:2e:a4:03:43:f9:a6:07:54:49:bc:31:
e7:59:f4:41:8c:97:bf:86:29:bc:4a:04:ee:27:7e:
cf:b8:05:11:22:04:31:34:58:99:17:9f:01:6b:b8:
8c:ae:00:bf:b3:3c:6d:82:0b:0a:9b:44:92:04:3c:
4b:6f:e0:7b:3f:34:0c:db:84:69:2d:43:c2:4c:9a:
8a:3f:b6:c6:e4:73:5a:0f:c7:5a:fb:a7:dd:07:65:
4e:5e:f4:f0:56:aa:d0:bb:d7:14:87:af:f2:dc:7d:
04:39:45:5c:35:b0:c9:c5:27:85:da:96:c0:4b:9f:
2f:48:91:a8:d9:67:63:59:48:7e:2d:bf:e9:50:f8:
5f:ef:20:9d:59:2e:4e:5c:f0:f5:95:3f:a2:3c:69:
ba:04:0f:d7:67:04:fe:12:48:a3:14:e1:dc:32:df:
df:47:99:ea:ff:9b:e6:7d:22:76:46:77:d2:9a:85:
aa:59:ff:07:78:14:18:5d:af:3a:66:14:2b:fb:05:
9b:50:67:a1:b8:e2:45:0c:20:43:7d:a5:c2:0c:91:
ca:c5:e6:4f:3a:5b:19:32:95:76:3e:7a:bb:48:28:
e2:56:f3:79:ed:ec:88:81:d1:1a:ae:8d:72:92:8c:
82:32:25:5b:37:d9:cd:f3:29:c4:25:0c:a9:a8:ff:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0B:2A:37:E9:F0:AE:59:23:2F:8F:21:6E:0C:C1:46:1E:E3:7A:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7F09F3445A511EF95DE9E6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:69:64:2c:8a:ac:d9:21:e3:b8:96:3d:bd:a0:2c:49:03:a7:
bb:21:5a:ce:73:5c:9e:3f:28:d4:1c:28:27:d7:99:73:12:7b:
ca:d0:e2:3c:fb:10:2d:6f:73:9d:16:ce:cc:02:e3:ac:c9:bf:
13:88:ac:f7:7e:05:10:70:27:36:4a:b4:56:1e:44:e5:bf:e9:
6b:ca:ad:2d:37:90:69:56:05:ee:c9:a2:6c:7a:41:ba:a0:e7:
0e:da:c7:81:1b:04:bd:ab:80:b6:9f:ee:f4:ad:e5:a6:74:4e:
b0:b1:6d:b8:91:94:91:e0:a2:21:3c:99:c3:16:f5:c8:8e:cb:
10:03:bd:41:66:72:0e:71:ac:10:04:00:1f:fd:db:82:03:35:
86:db:69:5d:fa:94:3a:c8:76:61:2a:a2:47:bc:27:20:88:1e:
bc:5a:54:f3:c5:4b:05:6e:a9:52:ab:a5:1c:b8:9f:c9:a8:18:
4c:9c:ab:ef:e8:f5:0a:64:c6:3a:35:38:d4:31:db:32:9b:3d:
7e:9a:28:02:0c:96:93:98:14:24:f6:27:60:ab:47:f2:b4:66:
55:d5:94:90:17:03:d7:6e:1d:fa:7e:b8:a1:74:de:ca:1a:09:
1e:20:c1:27:d8:e9:a9:1e:94:11:f5:ce:17:f1:f6:90:30:d4:
fe:cc:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:09:46 2024 by rpki-client on console-ams.rpki-client.org